mandatory

SN Required Information Details

1 Role OT Network Engineer

2 Required Technical Skill Set  Firewall, ACL, VPN, DMZ configuration

 Network segmentation: VLAN, VPN,

MPLS

 Secure WAN, remote access governance

 Experience with Cisco/Fortinet/OEM firewalls

3 No of Requirements 1

4 Desired Experience Range 5-8 Years

5 Location of Requirement XXXX

Desired Competencies (Technical/Behavioral Competency)

Must-

Have**  Strong hands‑on experience in firewall policy design and review

 Ability to create and validate ACL rules aligned with security architecture baselines.

 Working knowledge of network segmentation models including VLAN, VPN,

DMZ.

 Experience designing secure WAN/MPLS/VPN connectivity for OT/IT‑OT networks.

 Deep understanding of OT network topologies and SCADA/EMS/DMS communication flows.

 Ability to evaluate network configuration changes against approved baseline designs.

 Competence in implementing and validating DMZ and interzone communication controls.

 Robust troubleshooting across L2/L3 switches, routers, and firewall appliances.

 Knowledge of encryption and secure communication protocols (IPsec, TLS, IEC

62351).

 Proficient in IT–OT network segmentation, the Purdue Enterprise Reference

Architecture, and key architectural concepts such as zones and conduits and DMZ implementation.

 Hands-on experience with OT network layers, including access, distribution, and core layers.





 Proven ability to collaborate with crossfunctional teams to integrate OT networks with existing IT infrastructures.

 Experience supporting SIEM onboarding by enabling log forwarding on network

JD Ver 1.0

devices.

 Familiarity with secure remote access, vendor access governance, and jump‑server concepts.

 Ability to review and harden network configurations to meet IEC 62443

guidelines.

 Experience coordinating network security activities with OEMs & customer

 Strong documentation and reporting skills for firewall baselines and change records.

 Ability to work in high‑availability OT environments with strict change management processes.

Good-to-

Have

 Excellent communication skills

 Certifications: CCNA/CCNP/Network Security.

 Exposure to industrial Ethernet and time sync (NTP/PTP).

 Experience with high‑availability firewall clustering.

 Familiarity with zero‑trust segmentation concepts.

SN Responsibility of / Expectations from the Role

1 Design firewall and ACL baselines; review change requests.

2 Implement and validate VLAN/VPN/DMZ segmentation.

3 Support secure WAN/MPLS/VPN connectivity and remote access.

4 Validate interzone flows and DMZ enforcement.

5 Enable logging and SIEM onboarding for network devices.

6 Troubleshoot network issues across L2/L3/firewalls.

7 Maintain baseline documentation and rule sets.

8 Collaborate with OT architect and OEM/GEV teams.

9 Align configurations to IEC 62443/IEC 62351 guidance.

📌 OT network engineer- SKF (India)
🏢 TCS_India
📍 India